high7.5Public exploit code
CVE-2007-2428
Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) fp or (…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ahhp Portal - 'page.php' Multiple Remote File Inclusions2007-04-25 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) fp or (2) sc parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ahhp-Portal | Ahhp-Portal | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityvulns.com/Qdocument838.html
- http://securityvulns.com/source13951.html
- http://www.osvdb.org/36568
- http://www.securityfocus.com/archive/1/477253/100/0/threaded
- http://www.securityfocus.com/bid/23658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34443
- http://securityvulns.com/Qdocument838.html
- http://securityvulns.com/source13951.html
- http://www.osvdb.org/36568
- http://www.securityfocus.com/archive/1/477253/100/0/threaded
- http://www.securityfocus.com/bid/23658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34443